CVE-2023-30608
HighAdvisory
Published 18 Apr 2023In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.010
- 60th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 56
- of 17,781 indexed, latest versions
- Container images
- 52
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service
Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 52 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlparsedeb | 0.2.4-3 | 0.2.4-3ubuntu0.1 | 1 |
| sqlparsepypi | 0.1.16, 0.2.2, 0.2.4, 0.3.0+4 more | 0.4.4 | 52 |
- OSV records
- UBUNTU-CVE-2023-30608GHSA-rrm6-wvj7-cwh2
- Also known as
- PYSEC-2023-87, USN-6064-1
Charts affected
56 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mlflowncsaVerified publisher | 1.2.1 | 1 of 4See more | 5,456 |
| seafilephybros-helm-charts | 4.0.1 | 1 of 1See more | 22,084 |
| weblateslamdev | 0.0.11 | 1 of 2See more | 8,694 |
| testing-multitoolsomeblackmagic | 0.1.2 | 1 of 1See more | 30,687 |
| pgadminstakaterVerified publisher | 0.1.14 | 1 of 1See more | 2,060 |
| vinyl-lib-chartvinyl-libVerified publisher | 0.1.0 | 1 of 1See more | 3,392 |
Container images carrying it
52 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cloudve/ | 4a3d7fae90bb | sqlparse | 0.4.4 | 3 |
| dpage/ | 781369df9994 | sqlparse | 0.4.4 | 3 |
| amancevice/ | 12a0a9e66550 | sqlparse | 0.4.4 | 2 |
| larribas/ | 05ccb0b46bfb | sqlparse | 0.4.4 | 2 |
| weblate/ | 69c160d37a3c | sqlparse | 0.4.4 | 2 |
| alexeyr7/ | df0b41fdbd53 | sqlparse | 0.4.4 | 1 |
| amancevice/ | c8c04bfe3d66 | sqlparse | 0.4.4 | 1 |
| apache/ | 975ab033580d | sqlparse | 0.4.4 | 1 |
| buntha/ | 154542cc3083 | sqlparse | 0.4.4 | 1 |
| chorss/ | 5c549cacb8ab | sqlparse | 0.4.4 | 1 |
| dpage/ | a5a656e1d5fd | sqlparse | 0.4.4 | 1 |
| dpage/ | b1f00b8163cf | sqlparse | 0.4.4 | 1 |
| evk02/ | ef6ff257ef35 | sqlparse | 0.4.4 | 1 |
| fiware/ | 29456835bb2c | sqlparse | 0.4.4 | 1 |
| flagsmith/ | fd58556339a4 | sqlparse | 0.4.4 | 1 |
| galaxy/ | e5c265fe9fcd | sqlparse | 0.4.4 | 1 |
| galaxy/ | 0267bad550e6 | sqlparse | 0.4.4 | 1 |
| gethue/ | 11b649636e68 | sqlparse | 0.4.4 | 1 |
| gethue/ | 5702b2c37ff9 | sqlparse | 0.4.4 | 1 |
| gluufederation/ | 1a1128b28b95 | sqlparse | 0.4.4 | 1 |
| graphiteapp/ | 04a0037cc2ae | sqlparse | 0.4.4 | 1 |
| ha33ona/ | 6affdfc644d0 | sqlparse | 0.4.4 | 1 |
| healthchecks/ | e82bb0836e30 | sqlparse | 0.4.4 | 1 |
| hhyo/ | 1aa41843419e | sqlparse | 0.4.4 | 1 |
| improwised/ | 97280b55cbd4 | sqlparse | 0.4.4 | 1 |
| kelvinsp/ | cd33e6db2a59 | sqlparse | 0.4.4 | 1 |
| kobotoolbox/ | b15679454415 | sqlparse | 0.4.4 | 1 |
| kobotoolbox/ | bcacc01bccd4 | sqlparse | 0.4.4 | 1 |
| kporwit/ | 217de0302218 | sqlparse | 0.4.4 | 1 |
| linuxserver/ | f7d7c7704249 | sqlparse | 0.4.4 | 1 |
| linuxserver/ | 50792a72fc71 | sqlparse | 0.4.4 | 1 |
| linuxserver/ | 94696dab3c50 | sqlparse | 0.4.4 | 1 |
| milesmcc/ | e821e31140f7 | sqlparse | 0.4.4 | 1 |
| netboxcommunity/ | 3d652dca5351 | sqlparse | 0.4.4 | 1 |
| openstackhelm/ | f728510bab3c | sqlparse | 0.4.4 | 1 |
| openstackhelm/ | e07d75953d2e | sqlparse | 0.4.4 | 1 |
| openzaak/ | 2e65313b9b10 | sqlparse | 0.4.4 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | sqlparse | 0.4.4 | 1 |
| redash/ | 9392753c0376 | sqlparse | 0.4.4 | 1 |
| seafileltd/ | 6693911bcc40 | sqlparse | 0.4.4 | 1 |
| seafileltd/ | 70628f29c663 | sqlparse | 0.4.4 | 1 |
| seafileltd/ | 7ac833196f60 | sqlparse | 0.4.4 | 1 |
| seafileltd/ | ed0fcda5e6a9 | sqlparse | 0.4.4 | 1 |
| someblackmagic/ | 6eca64b6b440 | sqlparse sqlparse | 0.2.4-3ubuntu0.1 0.4.4 | 1 |
| statcan/ | 3921305425b8 | sqlparse | 0.4.4 | 1 |
| swisscomcloud/ | b6639d1a922e | sqlparse | 0.4.4 | 1 |
| tachyongroup/ | 7e79b9000856 | sqlparse | 0.4.4 | 1 |
| tachyongroup/ | f4f7fabe1037 | sqlparse | 0.4.4 | 1 |
| taigaio/ | 9f97323cc150 | sqlparse | 0.4.4 | 1 |
| vabene1111/ | ec4e9e2905b0 | sqlparse | 0.4.4 | 1 |